Module engine

Structs§

EngineConfig
ExternalRuleSource: A pre-read rule file provided by the caller (custom Rego/CEL or Guard DSL).
ValidateConfig

build_rule_list
catch_panics: Runs operation, converting any unwinding panic into an error produced by on_panic instead of letting it escape into the caller. Every embedding boundary routes through this guard, so an internal invariant violation on adversarial input becomes a structured, catchable error rather than crashing or trapping the host.
extract_diagnostics
make_resource_diagnostic
make_resource_diagnostic_at_source: Builds a resource diagnostic whose public property path and source-span anchor differ. Scenario-aware rules use this when an effective path maps to an authored intrinsic branch.
semantic_model_to_input_json
validate_bytes_with_path
validate_catching_panics: Convenience wrapper over catch_panics for the core validation flow: a panic becomes a structured ValidationError::Engine carrying the message.